This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa File: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (raw, json) Hash identifier: um4OKmoKkWPMsxDaraETdVVvUJbMl9i7IXbi+Svb6ak= Subject key identifier: DD:C3:16:B6:70:FD:80:49:01:D5:10:D3:4B:4B:04:A9:35:BF:CF:B0 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584C61915DA0235EC2067434CC60 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 46687 IP address blocks: 64.82.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:5d:a0:23:5e:c2:06:74:34:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=c9fa3139-cdb4-4a04-99ff-5aec43596005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:0a:b5:06:b0:96:50:b0:51:09:94:d8:c8: 41:6f:e7:1d:4f:6e:be:42:e0:67:4e:f9:c4:32:41: 12:9b:8d:22:53:5a:ab:63:00:b6:27:a4:16:a2:87: a3:62:f5:e6:76:f1:02:94:4e:d1:c0:43:82:e8:0b: da:62:b5:dd:45:53:ef:b5:2d:22:0b:d1:c7:28:de: 5c:25:ba:07:34:d0:c8:ae:60:30:dd:77:f1:c4:18: 15:69:b8:b3:8b:d9:0e:26:6f:c0:56:71:2f:b8:d9: 42:d8:8c:ee:31:20:71:5c:5b:92:cd:10:40:b2:f5: ad:85:c9:e4:74:c7:64:b8:aa:03:8c:b2:13:4a:26: 90:e0:6a:03:4b:94:67:38:38:d5:e2:fd:c7:54:80: 9f:f0:70:25:38:ba:f8:ef:67:7d:da:b8:82:55:2c: 3b:60:5c:b1:64:05:f1:fb:23:a9:7d:f7:46:47:ee: f5:d7:76:13:d5:84:f1:fe:1b:ff:05:c6:0c:f6:72: 83:76:d0:7f:b6:63:59:13:de:2b:e8:80:99:45:ce: 87:68:1c:82:56:80:aa:ba:3b:61:07:e4:79:08:11: 51:65:40:d5:ad:5d:68:1d:b6:2f:79:96:29:e3:68: ea:13:ac:7d:4a:03:d3:ca:65:8b:e3:a5:01:db:4b: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C3:16:B6:70:FD:80:49:01:D5:10:D3:4B:4B:04:A9:35:BF:CF:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 64.82.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0d:c0:83:f5:21:62:76:bf:c0:f7:10:ac:0c:95:4e:df:aa: be:6c:34:59:07:bb:99:19:a2:e4:3b:c6:9a:49:50:ca:d5:47: 67:36:5c:10:21:5c:83:1d:03:d9:00:cf:94:19:da:f8:62:35: bb:40:e5:4f:25:d4:bc:78:82:70:0d:cb:06:f5:cf:d0:81:08: 16:9e:3c:10:04:4b:6b:fa:1a:07:4a:27:47:40:b5:35:72:89: 5d:e4:31:a1:4a:cb:c8:b5:bb:5b:b3:9f:d9:bc:9e:ea:37:24: f1:d7:80:72:2f:29:0e:2d:41:bb:21:68:22:d4:03:3a:d1:18: 18:e1:ac:20:49:d0:81:9c:45:31:81:b0:3f:20:b9:16:0c:31: 3e:60:e9:34:d8:49:d2:a6:67:1e:32:b5:13:6b:3c:73:b5:a2: c0:c6:64:a5:48:90:a8:53:73:14:5c:77:d7:2c:57:ac:bd:b0: 4e:e7:80:24:88:94:3b:cb:c3:da:52:95:55:8e:5a:8c:d1:03: 65:ed:53:2b:6e:f3:16:ea:b4:b9:b9:5f:5a:82:7b:a0:01:97: 5e:8f:fc:51:b4:c1:2b:73:f9:91:36:76:1e:50:e5:31:bc:a4: c1:f1:5e:e6:cb:22:7e:f5:38:8c:0c:30:1c:b2:37:b3:96:7f: e5:1a:86:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkV2gI17CBnQ0zGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk YzlmYTMxMzktY2RiNC00YTA0LTk5ZmYtNWFlYzQzNTk2MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLEKtQawllCwUQmU2MhBb+cdT26+QuBnTvnE MkESm40iU1qrYwC2J6QWooejYvXmdvEClE7RwEOC6AvaYrXdRVPvtS0iC9HHKN5c JboHNNDIrmAw3XfxxBgVabizi9kOJm/AVnEvuNlC2IzuMSBxXFuSzRBAsvWthcnk dMdkuKoDjLITSiaQ4GoDS5RnODjV4v3HVICf8HAlOLr472d92riCVSw7YFyxZAXx +yOpffdGR+7113YT1YTx/hv/BcYM9nKDdtB/tmNZE94r6ICZRc6HaByCVoCqujth B+R5CBFRZUDVrV1oHbYveZYp42jqE6x9SgPTymWL46UB20uTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3DFrZw/YBJAdUQ00tLBKk1v8+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYTY0YmJmYWEtYTE0Ny0z OWY5LWJmMWYtZGJhZTk5NzFkOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0NwIP1IWJ2v8D3EKwMlU7fqr5sNFkHu5kZouQ7xppJUMrVR2c2XBAh XIMdA9kAz5QZ2vhiNbtA5U8l1Lx4gnANywb1z9CBCBaePBAES2v6GgdKJ0dAtTVy iV3kMaFKy8i1u1uzn9m8nuo3JPHXgHIvKQ4tQbshaCLUAzrRGBjhrCBJ0IGcRTGB sD8guRYMMT5g6TTYSdKmZx4ytRNrPHO1osDGZKVIkKhTcxRcd9csV6y9sE7ngCSI lDvLw9pSlVWOWozRA2XtUytu8xbqtLm5X1qCe6ABl16P/FG0wStz+ZE2dh5Q5TG8 pMHxXubLIn71OIwMMByyN7OWf+UahpQ= -----END CERTIFICATE-----Generated at Sun Jan 11 08:16:59 2026 by rpki-client